$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17206db4-cacd-30d8-9030-e85396583467.roa File: 17206db4-cacd-30d8-9030-e85396583467.roa (raw, json) Hash identifier: 1iKH+Sm2vrVHG5gDaiJ1g8Qq2wZEYprEWyhQANXha04= Subject key identifier: 9E:33:EF:65:2E:CD:BB:E5:F3:DE:C6:FC:76:25:33:81:96:6F:8A:61 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797B56CC4561734BD595F40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17206db4-cacd-30d8-9030-e85396583467.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.3.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:b5:6c:c4:56:17:34:bd:59:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=bd19ea06-7db5-4475-b032-4d5837bf009e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:04:41:0d:33:c8:1d:44:14:ff:e3:2e:0f:f3: 33:78:7d:4c:40:f5:e4:cb:d7:10:b0:26:da:b5:0a: 30:4b:2e:69:d8:0b:37:79:63:96:46:75:05:fa:3d: d2:6c:bb:c3:ed:4a:0b:90:4e:c2:1d:49:a7:0f:65: 2a:c4:92:3f:87:6d:1c:0a:40:83:7c:c5:04:f3:1a: 86:9e:c0:06:1e:d7:73:00:85:99:94:e8:c4:3b:04: d2:ce:2d:d4:a5:92:d7:15:81:f1:eb:53:dc:28:6f: 31:8c:9d:14:06:57:54:43:85:14:a8:49:2d:26:a9: b2:a0:64:83:20:f6:98:4e:51:55:24:0a:61:99:5c: a9:7b:24:30:ff:51:16:0e:2e:08:4c:12:47:70:8b: 45:ae:33:10:f1:41:9b:5a:b0:46:2d:94:fe:f6:2a: 8b:fa:f5:c6:c1:f9:55:62:6c:d1:df:59:66:7c:a5: fd:b8:49:93:92:9b:14:c4:2e:b5:f2:e1:78:8e:42: f2:9b:4d:e7:d2:9a:28:ea:92:f2:d1:13:01:83:04: c9:9d:37:47:5f:76:f3:3b:33:f7:92:88:18:f8:ad: 64:ae:25:9e:33:00:e9:2c:08:23:22:0b:c5:b2:4a: 3e:87:6b:96:61:25:4f:15:3f:3f:21:ba:d8:dc:db: 85:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:33:EF:65:2E:CD:BB:E5:F3:DE:C6:FC:76:25:33:81:96:6F:8A:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17206db4-cacd-30d8-9030-e85396583467.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:c0:ca:d6:bd:ec:59:d8:9d:dc:0d:a0:f8:65:ff:56:6f:74: ab:01:54:34:85:ad:34:01:4e:38:36:81:88:2d:1d:79:c1:d8: 46:eb:9f:61:1a:b7:a0:09:80:29:0a:f0:67:b2:55:dd:fd:30: 51:73:5f:32:3a:f1:77:bf:0e:98:6d:c8:6a:af:20:fe:05:90: fb:4e:82:34:72:4b:f0:e6:0d:38:ce:1d:ff:7a:4c:18:da:55: 63:7a:08:ce:d6:02:78:d5:dd:af:fd:fd:2c:af:ce:da:51:ef: 0d:35:55:f3:68:ea:08:c9:c2:bd:f7:c9:b4:9e:d4:14:6e:5f: 72:42:f4:a6:82:41:7a:62:b6:b2:2e:88:46:00:1d:28:f7:47: f6:6f:5c:20:25:be:d7:42:51:e4:89:3c:37:8b:8d:74:39:2b: 5c:d1:cf:0e:f8:57:76:1d:fc:b6:76:c3:e1:a7:67:9c:21:37: 02:21:e0:24:07:21:e0:9f:a7:cf:27:e0:18:2e:10:5e:64:18: ec:db:ad:eb:c0:67:c7:b5:b2:1f:1b:64:12:23:87:2e:89:f5: ef:b8:67:d3:b6:61:58:f1:3e:4c:e0:7c:07:cf:e7:64:cb:c3: 06:f0:5b:a2:d7:68:50:45:b5:73:60:ef:ca:fc:70:6f:e8:2c: 53:81:49:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl7VsxFYXNL1ZX0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YmQxOWVhMDYtN2RiNS00NDc1LWIwMzItNGQ1ODM3YmYwMDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgRBDTPIHUQU/+MuD/MzeH1MQPXky9cQsCba tQowSy5p2As3eWOWRnUF+j3SbLvD7UoLkE7CHUmnD2UqxJI/h20cCkCDfMUE8xqG nsAGHtdzAIWZlOjEOwTSzi3UpZLXFYHx61PcKG8xjJ0UBldUQ4UUqEktJqmyoGSD IPaYTlFVJAphmVypeyQw/1EWDi4ITBJHcItFrjMQ8UGbWrBGLZT+9iqL+vXGwflV YmzR31lmfKX9uEmTkpsUxC618uF4jkLym03n0poo6pLy0RMBgwTJnTdHX3bzOzP3 kogY+K1kriWeMwDpLAgjIgvFsko+h2uWYSVPFT8/IbrY3NuFOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4z72Uuzbvl897G/HYlM4GWb4phMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTcyMDZkYjQtY2FjZC0z MGQ4LTkwMzAtZTg1Mzk2NTgzNDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzAyta97FnYndwNoPhl/1ZvdKsBVDSFrTQBTjg2gYgtHXnB2Ebrn2Ea t6AJgCkK8GeyVd39MFFzXzI68Xe/DphtyGqvIP4FkPtOgjRyS/DmDTjOHf96TBja VWN6CM7WAnjV3a/9/SyvztpR7w01VfNo6gjJwr33ybSe1BRuX3JC9KaCQXpitrIu iEYAHSj3R/ZvXCAlvtdCUeSJPDeLjXQ5K1zRzw74V3Yd/LZ2w+GnZ5whNwIh4CQH IeCfp88n4BguEF5kGOzbrevAZ8e1sh8bZBIjhy6J9e+4Z9O2YVjxPkzgfAfP52TL wwbwW6LXaFBFtXNg78r8cG/oLFOBSa0= -----END CERTIFICATE-----Generated at Mon Oct 20 08:05:07 2025 by rpki-client